BTCPay Server Warns of Critical Vulnerability Under Active Attack, Urges Users to Upgrade

iconChainthink
Share
This is the logo of the coin.
BTC
$65,139.200.14%
AI summary iconSummary
On August 8, BTCPay Server issued a warning regarding an actively exploited vulnerability that could result in unauthorized access and fund loss. Users are urged to upgrade their blockchain to version 2.4.2 and confirm the network upgrade via the server footer. If an immediate upgrade is not possible, temporarily shutting down the service is recommended. Users should replace macaroon credentials, recreate the macaroons.db file, and refresh Lightning Network authentication strings. Users of hot wallets are advised to transfer their funds and recreate their wallets. The vulnerability was reported by a Bitcoin Red Team member, but no details of the exploit or confirmed losses have been disclosed.

ChainThink reports that on August 8, BTCPay Server announced on X that its Bitcoin payment processing platform has identified a critical vulnerability currently under active attack, which could allow attackers to gain unauthorized access and result in fund losses.

The official requirement is for administrators to upgrade to version 2.4.2 and confirm that the server footer displays the update as complete; if an immediate upgrade is not possible, it is recommended to temporarily shut down BTCPay Server to prevent further attacks.

BTCPay Server also recommends that users rotate potentially exposed macaroon credentials, recreate the macaroons.db file, and refresh authentication strings for other Lightning Network backends.

If a user creates a hot wallet in BTCPay Server, the official recommendation is to transfer the funds and recreate the wallet.

At this time, BTCPay Server has not disclosed the specific details of the vulnerability, the start time of the attack, the number of affected servers, or whether any funds have been stolen. The vulnerability was reported by a member of the Bitcoin Red Team.

Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information. Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.